Data Processing Addendum & Sub-processors

Last updated: 2026-06-16

This page combines our Data Processing Addendum ("DPA") summary and the list of sub-processors that support CloviReach. It supplements the Privacy Policy and Terms of Service.

1. Roles

For the contact and engagement data you upload and generate, you are the data controller and CloviTek AI (operating CloviReach) is the processor, processing that data on your documented instructions to provide the service. For your account and billing data, we act as a controller.

2. Processing terms

• We process personal data only to provide and support the service, and on your instructions.
• We require confidentiality from personnel with access to personal data.
• We apply appropriate technical and organizational security measures (encryption in transit, access controls, tenant isolation).
• We assist you, as far as reasonable, with data-subject requests and breach notifications.
• On termination, we delete or return personal data subject to legal-retention requirements.

3. Sub-processors

We engage the following categories of sub-processors, each bound by data-protection terms. (These processor names appear here for transparency and compliance; they are not part of our customer-facing product marketing.)

Sub-processor	Purpose	Data handled
Stripe	Payment processing and subscription billing	Billing identifiers, payment metadata
Amazon Web Services (AWS)	Cloud hosting, storage, and content delivery	All service data at rest/in transit
Cloudflare	CDN, DNS, and edge security	Technical/request metadata
Email delivery provider	Outbound email sending and engagement tracking	Recipient address, message content, open/click events
LinkedIn automation provider	LinkedIn outreach steps	Recipient profile reference, message content, reply events
SMS gateway provider	Outbound SMS and STOP handling	Phone number, message content, opt-out events
Social scheduling provider	Drafting organic social posts (draft-only)	Draft post content

4. International transfers

Where sub-processors transfer data internationally, we rely on appropriate safeguards such as standard contractual clauses.

5. Changes to sub-processors

We may update this list as our infrastructure evolves; material changes are posted here with a revised "Last updated" date.

6. Contact

For DPA execution or sub-processor questions, contact enable JavaScript to view">enable JavaScript to view.